Stellantis probes data breach linked to third-party provider

Stellantis is investigating a data breach after unauthorized access to a third-party provider’s platform that supports its North American customer service operations, with the company not naming the impacted provider. The multinational carmaker said the attack could have exposed customer contact information, but emphasised that the affected platform does not store financial or sensitive personal data.

Stellantis noted it has launched incident response measures, initiated a comprehensive investigation, and taken steps to contain and mitigate the situation, while also notifying relevant authorities and directly informing affected customers. The statement added that the personal information involved was limited to contact details and reaffirmed that no financial or sensitive information was accessed.

Stellantis, created in 2021 through the merger of PSA Group and Fiat Chrysler Automobiles, reported revenues of €156.9 billion in 2024 and employed around 248,243 people worldwide. The disclosure followed the incident dated 22 September 2025.